PT-2022-10284 · Google · Tensorflow

May + 1 · Published 2022-06-27 · Updated 2022-07-07 · CVE-2021-33651

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow (affected versions not specified)

Description The issue arises when the DepthwiseConv2D operator is used with its depth multiplier attribute set to 0. This configuration leads to a division by 0 exception during the analytical operation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

CVE-2021-33651

Affected Products

Tensorflow

References · 4

• https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-004_en.md · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-33651 · Security Note
• https://osv.dev/vulnerability/CVE-2021-33651 · Vendor Advisory
• https://t.me/cibsecurity/45197 · Telegram Post